Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-5740


Unspecified vulnerability in the Intel Trusted Execution Technology (TXT) SINIT Authenticated Code Modules (ACM) before 1.2, as used by the Intel QM77, QS77, Q77 Express, C216, Q67 Express, C202, C204, and C206 chipsets and Mobile Intel QM67 and QS67 chipsets, when the measured launch environment (MLE) is invoked, allows local users to bypass the Trusted Execution Technology protection mechanism and perform other unspecified SINIT ACM functions via unspecified vectors.


Published

2013-09-12T18:37:44.287

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.9 (MEDIUM)

CVSSv2 Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.4

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Hardware intel c202_chipset - Yes
Hardware intel c204_chipset - Yes
Hardware intel c206_chipset - Yes
Hardware intel c216_chipset - Yes
Hardware intel mobile_intel_qm67_chipset - Yes
Hardware intel mobile_intel_qs67_chipset - Yes
Hardware intel q67_express_chipset - Yes
Hardware intel qm77_chipset - Yes
Hardware intel qs77_chipset - Yes
Hardware intel qs77_chipset - Yes
Operating System intel trusted_execution_technology_sinit_authenticated_code_module ≤ 1.1 Yes

References